799 matches found
CVE-2026-2385
The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 6.4.7. This is due to the plugin decrypting and trusting...
CVE-2026-24775: Insufficient Verification of Data Authenticity
OpenProject is an open-source, web-based project management software. In the new editor for collaborative documents based on BlockNote, OpenProject maintainers added a custom extension in OpenProject version 17.0.0 that allows to mention OpenProject work packages in the document. To show work...
The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server packages lies in insufficient data validation, which allows attackers to perform cross-site scripting attacks.
The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server programs is related to insufficient data validation. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Windows Management Services management tool allows a perpetrator to disclose sensitive information that is protected by this tool.
The vulnerability of the Windows Management Services management tool for operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Windows File Explorer driver on Windows operating systems, allowing attackers to disclose protected information
The vulnerability of the Windows File Explorer in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the synchronization mechanism of the “Calendar” application for the Aurora operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the synchronization mechanism of the “Calendar” application for the Aurora operating system is related to insufficient neutralization of certain elements in data requests. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access t...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.3 and Sequoia prior to 15.7.3, which stems from insufficient data protection and could result in access to...
The vulnerability of the Jitsi Meet Electron software, related to insufficient verification of data authenticity, allows a perpetrator to execute arbitrary code.
The vulnerability of the Jitsi Meet Electron software lies in the insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Config::checkParameterValue function in the config.cpp module of the “Red Database” database management system allows a perpetrator to access confidential information.
The vulnerability of the Config::checkParameterValue function in the config.cpp module of the “Red Database” database management system is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...
CVE-2025-12216: Insufficient or Incomplete Data Removal within Hardware Component
Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
The vulnerability of the Mattermost instant messaging application, related to insufficient protection of sensitive data, allows a perpetrator to carry out a brute-force attack.
The vulnerability of the Mattermost instant messaging application is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack remotely...
The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.
The vulnerability of the Windows Push Notification Service in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
F5 Networks BIG-IP : IPMI vulnerability (K000156992)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000156992 advisory. AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.CVE-2023-28863 Tenable has...
EUVD-2017-15447
Malware in sbrugna...
EUVD-2017-15032
Malware in sbrugna...
EUVD-2017-15960
Malware in sbrugna...
EUVD-2021-1910
Malware in sbrugna...
EUVD-2020-27720
Malware in sbrugna...